Fake GTA VI demo sites push info-stealing malware
Cybercriminals have set up fake websites impersonating Rockstar to offer a nonexistent Grand Theft Auto VI demo. Clicking the download button installs malware that steals passwords, cookies, and logged-in sessions from browsers. Malwarebytes warns that the attack can bypass multi-factor authentication in some cases.
The fraudulent pages mimic Rockstar's official site and lure visitors with a nonexistent playable demo for Grand Theft Auto VI. Clicking the download button delivers an information-stealing program rather than a game installer. Malwarebytes identified the campaign, noting the malware harvests browser-stored passwords, cookies, and active login sessions, potentially letting attackers hijack accounts even when multi-factor authentication is enabled.
GTA 6 has faced repeated delays and is currently slated for a November 19, 2026 release. Netflix plans to air an extended preview on Thursday, which may help players distinguish genuine content from scams. The incident underscores the risk of downloading game files from unverified sources, especially when anticipation runs high.
This scam could affect a broad audience of eager gamers, particularly younger users who may be less cautious about verifying download sources. The ability to bypass multi-factor authentication means victims could lose access to email, banking, and social media accounts, not just gaming profiles. The incident may also erode trust in legitimate game announcements, as fans grow wary of leaks and previews. Broader awareness of such tactics could help reduce susceptibility, though the emotional pull of a long-awaited release makes this demographic especially vulnerable to social engineering.